This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa
File:                     8DB2B8E6E27F11EEA6719536C4F9AE02.roa (raw, json)
Hash identifier:          /J2P3+F9I4RcbTNpEorzeOPa4BYBIFQIQrK++Pqtsug=
Subject key identifier:   97:59:46:51:1C:4A:CD:8C:2C:98:AF:C8:50:43:C0:B2:7C:49:93:4E
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D86
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa
Signing time:             Fri 30 Jan 2026 16:14:25 +0000
ROA not before:           Fri 30 Jan 2026 16:14:25 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.81.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 15:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7558 (0x1d86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jan 30 16:14:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697cd8e1-763a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d6:92:5a:ad:3a:cd:ac:f4:11:74:49:11:0f:
                    96:5e:cf:f9:34:c1:30:ab:76:c5:7e:27:ef:f5:31:
                    db:29:42:4a:f9:6d:5a:21:95:e9:ef:2c:8f:66:06:
                    69:cf:80:f6:a8:62:08:6c:63:3c:fa:cb:67:83:e3:
                    e1:ac:93:0f:ff:19:01:e4:79:37:c0:c6:e8:a2:a8:
                    9e:54:54:d4:a2:b6:79:04:91:0c:3f:1f:42:50:a0:
                    79:81:14:07:73:f7:dd:01:df:69:fb:e9:e0:13:d5:
                    46:3c:08:4d:ac:53:2e:4b:c2:a4:f1:bc:b1:1d:92:
                    1b:7a:ed:d6:44:9c:17:f8:a1:e5:ed:29:7b:9e:b4:
                    f1:b6:b7:18:5a:8a:20:15:83:d7:27:fa:4a:0b:e7:
                    33:76:a6:31:41:11:db:5e:9d:0b:33:98:23:39:ba:
                    ba:7f:03:b4:01:0a:35:64:f2:ff:7d:64:19:8d:a6:
                    d3:13:35:2a:17:e7:25:28:36:9a:87:9a:fd:8e:26:
                    c0:1a:e5:dd:02:9c:9e:79:68:20:12:ab:42:ff:40:
                    f0:3b:4d:03:4d:1a:03:1e:2e:c2:bd:18:5c:56:dd:
                    1b:c9:80:8b:69:47:d5:4a:67:f5:c2:b3:43:dd:90:
                    91:36:cd:87:b1:e9:5e:d2:5f:ee:cb:17:83:38:77:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:59:46:51:1C:4A:CD:8C:2C:98:AF:C8:50:43:C0:B2:7C:49:93:4E
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:44:33:64:bd:bf:d4:70:da:a2:5c:40:13:7f:66:57:f9:f4:
         ec:87:df:56:09:4b:58:bc:c1:3b:cc:de:cd:62:d2:54:ea:7c:
         ff:33:ab:ca:c1:d1:4e:da:00:2a:e9:c9:2d:f1:28:07:33:35:
         f7:89:ef:65:64:83:01:d3:4c:5c:8b:cb:75:d4:cb:b5:54:eb:
         08:23:db:71:f3:5d:3d:45:9b:b7:9e:d7:9d:5e:bd:ae:24:19:
         84:2f:8e:27:9b:06:cc:53:12:65:5f:9f:8c:22:2f:4e:9a:6a:
         c2:58:e3:7b:24:c7:30:e9:0c:2f:b6:ff:4b:ea:c6:f9:f5:b2:
         5c:64:55:ef:3a:72:32:ca:3b:50:28:a2:50:cf:21:b7:98:89:
         72:47:c9:fa:9d:be:0e:ff:c4:4f:da:d7:be:81:d7:e4:82:e0:
         22:38:14:8a:94:93:89:9a:f3:68:a9:51:d4:a6:f3:88:21:df:
         41:c4:f8:6c:14:14:42:7d:14:d2:80:c4:25:35:59:44:74:d7:
         7e:c3:73:58:7f:1f:2b:03:83:d7:a0:be:64:87:8c:dd:c5:ef:
         53:83:1c:cf:b1:ae:b1:72:d5:1b:db:45:1f:85:d0:67:01:ac:
         5e:49:21:6e:35:22:11:98:2b:2c:c5:f2:ca:c9:2f:61:2f:6b:
         0b:9e:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:10:02 2026 by rpki-client